STATE OF CALIFORNIA
AUTHORIZATION FOR RELEASE OF PROTECTED HEALTH INFORMATION
CDCR 7385 (Rev. 10/19)
DEPARTMENT OF CORRECTIONS AND REHABILITATION
Instructions
Note: Part IV is the request for release of verbal health care information or health care information as part
of written correspondence, and Part V is the request for release of health care records.
Part I - “Patient Information”: Records the patient's full name (last, first, and middle), CDCR number, date of birth,
and address if he/she is paroled or released (incarcerated patients do not need to provide an address).
Part II - "Individual/Organization Authorized to Release Personal Health Records if Other Than CDCR":
Records the name and address of the individual or organization authorized to release personal health records if
other than CDCR.
Part III - "Individual/Organization to Receive the Information": Records who is to receive the information.
Part IV - "Authorization Expiration Event or Expiration Date for Release of Verbal Information/Written
Correspondence": Used by the patient to limit the time period during which information may be shared.
• The patient may enter the date he/she wants the authoriz
ation to expire.
• The patient may enter
an expiration event.
• The patient may enter a date range of
information to be shared.
• If no expiration date is specified, t
his authorization is good for 12 months
f
r
om the date signed
in Section IX.
Part V - “Health Care Records to be Released
- General
”:
Contains
a designated line for the date range of health
care records to be released.
• “Medical Services” is checked when the patient wishes to have information released related to medical care.
• “Dental Services” is checked when the patient wishes to have information released related to dental treatment.
• “Other” is checked when the patient wishes to further restrict or further authorize the release of his/her medical
information, and he/she is to write those wishes on the line provided.
•
•
•
•
•
•
•
Part VI - "Health Records to be Released - Specify": Health c
are information in
this section requires a date range,
additional signature, and signature date.
• “Communicable Disease” is checked when the patient wishes to have information released related to
communicable disease testing and treatment. Communicable disease includes sexually transmitted infections.
• “Genetic Testing” is checked when the patient wishes to have information released related to genetic testing.
• “HIV Test Results” is checked when the patient wishes to have HIV test results released.
• “Medication Assisted Treatment
Records” is checked when the patient wishes to have information related
to medication assisted treatment released.
• “Mental Health Treatment Records” is checked when the patient wishes to have information released
related to mental health treatment.
• “
Substance Use Disorder Records” is checked when the patient wishes to have information related to
substance use disorder treatment released.
• “Psychotherapy Notes” is checked when the patient wishes to have psychotherapy notes released.
Requests for psychotherapy notes require a separate CDCR 7385 and may not be combined with any
other request for health care records.
Under HIPAA, there is a difference between regular personal health information and psychotherapy notes. The following
is HIPAA's definition of psychotherapy notes (§164.501):
Psychotherapy notes means notes recorded (in any medium) by a health care provider who is a
mental health
professional documenting or analyzing the contents of conversation during a private counseling session or a group,
joint, or family counseling session and that are separated from the rest of the individual's medical record. Psychotherapy
notes excludes medication prescription and monitoring, counseling session start and stop times, the
modalities and
frequencies of treatment furnished, results of clinical tests, and any summary of the following items: diagnosis,
functional status, the treatment plan, symptoms, prognosis, and progress to date.
Unauthorized collection, creation, use, disclosure, modification or destruction of personally identifiable information and/or
protected health information may subject individuals to civil liability under applicable federal and state laws.